Exhibit 300: Exhibit 300 - Global Network (Revision 6) 



Exhibit 300: Capital Asset Plan and Business Case Summary 

Part ■ = Summary ■ nformation And J ustification (All Capital Assets) 



Section A: Overview (All Capital Assets) 

1. Date of Submission: 

2. Agency: 

3. Bureau: 

4. Name of this Capital Asset: 

5. Unique Project (I nvestment) Identifier: (For IT 
investment only, see section 53. For all other, use agency 
I D system.) 

6. What kind of investment will this be in FY2009? (Please 
NOTE: Investments moving to O&M in FY2009, with 
Planning/ Acquisition activities prior to FY2009 should not 
select O&M. These investments should indicate their current 
status.) 

8. Provide a brief summary and justification for this investment, including a brief description of how this closes in part or 
in whole an identified agency performance gap: 

The Global Network Program operates & modernizes the State Department's global network. This network forms the 
backbone of the Department's IT infrastructure, providing essential communication to 260 diplomatic posts around the 
world, including embassies, consulates, and multi-agency missions. It also connects 240 additional sites, such as post 
annexes. Employees increasingly rely on the network's communications to further the United States' foreign policy goals. 
Global Network supports the strategic goal: strengthening consular & management capabilities. 



9/10/2007 

Department of State 

Information Resource Management 

Exhibit 300 - Global Network 

014-00-02-00-01-1100-00 

Mixed Life Cycle 



The Department envisions an IT environment that allows access to IT resources "via an integrated continually refreshed 
infrastructure that extends to mobile end-user devices. ."(State & USAID Joint Strategic Plan FY07-12). To support this 
vision, the Global Network is taking bold steps to provide a network that is secure, always available, and has sufficient 
bandwidth to support a multitude of services. This effort also helps prepare the Department for the IT Infrastructure Line 
of Business I nitiative. 



The Global Network is a consolidated business case, integrating subprograms: 



1. Enterprise Network Management modernizes & maintains communications over the global network, providing essential 
connectivity to Foreign Affairs personnel around the world. 

2. Bandwidth Management analyzes network capacity requirements, helps posts procure network connectivity, & 
provides funding for global bandwidth. Use of innovative technologies has helped the program increase bandwidth 
capacity while reducing the cost per bit of bandwidth. 

3. Enterprise Software Licensing establishes & maintains enterprise software licensing agreements, lowering the prices 
the Department pays per license based on volume purchases. 

4. The Alternate Communications Site (ACS), housed at a FEMA location, is an alternate site for routing essential 
communications in the event the primary locations are not operational. 

5. The InfoCenter is a 24-hour IT help desk providing first-tier customer support for embassies, consulates, & offices 
throughout the world. 



9. Did the Agency's Executive/I nvestment Committee Yes 
approve this request? 

a. If "yes," what was the date of this approval? 8/28/2007 

10. Did the Project Manager review this Exhibit? Yes 



12. Has the agency developed and/or promoted cost Yes 
effective, energy-efficient and environmentally sustainable 
techniques or practices for this project? 

a. Will this investment include electronic assets Yes 
(including computers)? 

b. Is this investment for new construction or major No 
retrofit of a Federal building or facility? (answer applicable 
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to non-IT assets only) 

1. If "yes," is an ESPC or UESC being used to help 
fund this investment? 

2. If "yes," will this investment meet sustainable 
design principles? 

3. If "yes," is it designed to be 30% more energy 
efficient than relevant code? 

13. Does this investment directly support one of the PMA Yes 
initiatives? 

If "yes," check all that apply: Right Sized Overseas Presence 

14. Does this investment support a program assessed using No 
the Program Assessment Rating Tool (PART)? (For more 
information about the PART, visit 
www.whitehouse.gov/omb/part.) 

a. If "yes," does this investment address a weakness No 
found during a PART review? 

b. If "yes," what is the name of the PARTed program? 

c. If "yes," what rating did the PART receive? 

15. Is this investment for information technology? Yes 

If the answer to Question 15 is "Yes," complete questions 16-23 below. If the answer is "No," do not answer questions 
16-23. 

For information technology investments only: 

16. What is the level of the IT Project? (per CIO Council PM Level 2 
Guidance) 

17. What project management qualifications does the (1) Project manager has been validated as qualified for this 
Project Manager have? (per CIO Council PM Guidance) investment 

18. Is this investment or any project(s) within this No 
investment identified as "high risk" on the 04 - FY 2007 
agency high risk report (per OMB Memorandum M-05-23) 

19. Is this a financial management system? No 

a. If "yes," does this investment address a FFMIA No 
compliance area? 

1. If "yes," which compliance area: 

2. If "no," what does it address? 

b. If "yes," please identify the system name(s) and system acronym(s) as reported in the most recent financial 
systems inventory update required by Circular A-ll section 52 

21. If this project produces information dissemination N/A 
products for the public, are these products published to the 
Internet in conformance with OMB Memorandum 05-04 and 
included in your agency inventory, schedules and priorities? 

23. Are the records produced by this investment Yes 
appropriately scheduled with the National Archives and 
Records Administration's approval? 

Question 24 must be answered by all Investments: 



Section D: Performance Information (All Capital Assets) 

In order to successfully address this area of the exhibit 300, performance goals must be provided for the agency and be linked 
to the annual performance plan. The investment must discuss the agency's mission and strategic goals, and performance 
measures (indicators) must be provided. These goals need to map to the gap in the agency's strategic goals and objectives this 
investment is designed to fill. They are the internal and external performance benefits this investment is expected to deliver to 
the agency (e.g., improve efficiency by 60 percent, increase citizen participation by 300 percent a year to achieve an overall 
citizen participation rate of 75 percent by FY 2xxx, etc.). The goals must be clearly measurable investment outcomes, and if 
applicable, investment outputs. They do not include the completion date of the module, milestones, or investment, or general 
goals, such as, significant, better, improved that do not have a quantitative or qualitative measure. 

Agencies must use the following table to report performance goals and measures for the major investment and use the Federal 
Enterprise Architecture (FEA) Performance Reference Model (PRM). Map all Measurement Indicators to the corresponding 
"Measurement Area" and "Measurement Grouping" identified in the PRM. There should be at least one Measurement Indicator 
for each of the four different Measurement Areas (for each fiscal year). The PRM is available at www.egov.gov. The table can be 

Tuesday, September 11, 2007 - 12:17 AM 
Page 2 of 9 



Exhibit 300: Exhibit 300 - Global Network (Revision 6) 
extended to include performance measures for years beyond FY 2009. 



Performance 1 nformation Table 


Fiscal Year 


Strategic 
Goal(s) 
Supported 


Measurement 
Area 


Measurement 
Category 


Measurement 
Grouping 


Measurement 
1 ndicator 


Baseline 


Target 


Actual Results 


2005 


Strengthening 
Consular and 
Management 
Capabilities 


Customer 
Results 


Service 
Accessibility 


1 ntegration 


Percent of 

enterprise 

standardized 

under Central 

Enterprise 

Oversight. 


Baseline is 0% in 
FY2004. 


1 ncrease to 10% 
of domestic sites 
and foreign 
posts in FY2005. 


As of September 
30, 2005, 10% 
of domestic and 
foreign posts are 
standardized 
under Central 
Enterprise 
Oversight. 


2005 


Strengthening 
Consular and 
Management 
Capabilities 


Mission and 
Business Results 


1 nformation and 

Technology 

Management 


IT 1 nfrastructure 
Maintenance 


Cost per bit of 
bandwidth 
decreases due to 
network 
modernization. 


Baseline is 
$.45/bit in 
FY2004. 


Decrease cost 
per bit of 
bandwidth to 
$.40/bit in 
FY2005 - for a 
10% annual 
decrease. 


As of September 
30, 2005, the 
cost per bit has 
decreased to 
$.40/bit. 


2005 


Strengthening 
Consular and 
Management 
Capabilities 


Processes and 
Activities 


Security and 
Privacy 


Security 


Percent of 
enterprise 
covered by real- 
time patch 
management 
and security 
monitoring tools. 


Baseline is 0% in 
FY2004. 


1 ncrease to 10% 
of targeted 
devices in 
FY2005. 


As of September 
30, 2005, 10% 
of targeted 
devices are 
covered by real- 
time patch 
management 
and security 
monitoring tools. 


2005 


Strengthening 
Consular and 
Management 
Capabilities 


Technology 


Reliability and 
Availability 


Availability 


Percent of 
network 
availability. 
Number of 
official 

diplomatic posts 
installed with 
VPN alternative 
routes. 


Baseline is 99% 
availability in 
FY2004 and 200 
VPN alternative 
routes installed 
to official 
enterprise sites. 


1 ncrease 
network 
availability to 
99.5% and 
complete 260 
VPN alternative 
routes to all 
official 
enterprise, 
diplomatic posts, 
such as 
embassies, 
consulates and 
missions in 
FY2005. 


As of September 
30, 2005, 
network 
availability is 
yy.D/o diiu zdu 
official 

diplomatic posts 
have been 
installed with 
VPNs. 


2006 


Strengthening 
Consular and 
Management 
Capabilities 


Customer 
Results 


Service 
Accessibility 


1 ntegration 


Percent of 

enterprise 

standardized 

under Central 

Enterprise 

Oversight. 


Baseline is 0% in 
FY2004. 


1 ncrease to 20% 
of domestic sites 
and foreign 
posts in FY2006. 


As of September 
30, 2006, 20% 
of domestic and 
foreign posts are 
standardized 
under Central 
Enterprise 
Oversight. 


2006 


Strengthening 
Consular and 
Management 
Capabilities 


Mission and 
Business Results 


1 nformation and 

Technology 

Management 


IT 1 nfrastructure 
Maintenance 


Cost per bit of 
bandwidth 
decreases due to 
network 
modernization. 


Baseline is 
$.45/bit in 
FY2004. 


Decrease cost 
per bit of 
bandwidth to 
$.36/bit in FY 
2006 - for a 
10% annual 
decrease. 


As of September 
30, 2006, the 
cost per bit has 
decreased to 
$.36/bit. 


2006 


Strengthening 
Consular and 
Management 
Capabilities 


Processes and 
Activities 


Security and 
Privacy 


Security 


Percent of 
enterprise 
covered by real- 
time patch 
management 
and security 
monitoring tools. 


Baseline is 0% in 
FY2004. 


1 ncrease to 30% 
of targeted 
devices in 
FY2006. 


As of September 
30, 2006, 30% 
of targeted 
devices are 
covered by real- 
time patch 
management 
and security 
monitoring tools. 


2006 


Strengthening 
Consular and 
Management 
Capabilities 


Technology 


Reliability and 
Availability 


Availability 


Percent of 
network 
availability. 
Number of sites 
installed with 
VPNs. 


Baseline is 99% 
availability in 
FY2004 and 200 
VPNs installed. 


1 ncrease 
network 
availability to 
99.6% in 
FY2006. Install 
40 additional 

Vrll^^lUI a LULdl 

of 300 VPNs) to 
formerly 
convenience 
sites reclassified 
to enterprise 
sites such as 
post annexes 
and other sites 
with official 
consular staff. 


As of September 
30, 2006, 
network 
availability is 
99.6%. 2 
additional official 

UipiUllldUL pUbLb 

have been 
installed with 
VPNs and 38 
post annex sites 
have been 
installed with 
VPNs for a total 
of 300 VPNs in 
place. 


2007 


Strengthening 


Customer 


Service 


1 ntegration 


Percent of 


Baseline is 0% in 


1 ncrease to 30% 


As of J une 30, 
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Performance 1 nformation Table 


Fiscal Year 


Strategic 
Goal(s) 
Supported 


Measurement 
Area 


Measurement 
Category 


Measurement 
Grouping 


Measurement 
1 ndicator 


Baseline 


Target 


Actual Results 




Consular and 
Management 
Capabilities 


Results 


Accessibility 




enterprise 
standardized 
under Central 
Enterprise 
Oversight. 


FY2004. 


of domestic sites 
and foreign 
posts in FY2007. 


2007, 28% of 
domestic and 
foreign posts are 
standardized 
under Central 
Enterprise 
Oversight. ENM 
is on target to 
complete 30% of 
domestic sites 
and foreign 
posts by 
September 30, 
2007. 


2007 


Strengthening 
Consular and 
Management 
Capabilities 


Mission and 
Business Results 


1 nformation and 

Technology 

Management 


IT Infrastructure 
Maintenance 


Cost per bit of 
bandwidth 
decreases due to 
network 
modernization. 


Baseline is 
$.45/bit in 
FY2004. 


Decrease cost 
per bit of 
bandwidth to 
$.32/bit in 
FY2007 - for a 
10% annual 
decrease. 


As of June 30, 
2007, the cost 
per bit has 
decreased to 
$.33/bit. ENM is 
on target to 
achieve a total 
savings of 10% 
by decreasing 
the cost per bit 
to $.32/bit by 
September 30, 
2007. 


2007 


Strengthening 
Consular and 
Management 
Capabilities 


Processes and 
Activities 


Security and 
Privacy 


Security 


Percent of 
enterprise 
covered by real- 
time patch 
management 
and security 
monitoring tools. 


Baseline is 0% in 
FY2004. 


1 ncrease to 50% 
of targeted 
devices in 
FY2007. 


As of J une 30, 
2007, 45% of 
targeted devices 
are covered by 
patch 

management 
and security 
monitoring tools. 
ENM is on target 
to increase the 
percentage of 
devices covered 
by patch 
management 
and security 
tools to 50% by 
September 30, 
2007. 


2007 


Strengthening 
Consular and 
Management 
Capabilities 


Technology 


Reliability and 
Availability 


Availability 


Percent of 
network 
availability. 
Number of sites 
installed with 
VPNs. 


Baseline is 99% 
availability in 
FY2004 and 200 
VPN alternative 
routes installed. 


1 ncrease 
network 
availability to 
99.7% in 
FY2007. Install 
40 additional 
VPNs(for a total 
of 340 VPNs) to 
formerly 
convenience 
sites reclassified 
to enterprise 
sites such as 
post annexes 
and other sites 
with official 
consular staff. 


As of J une 30, 
2007, network 
availability is 
99.68%. 30 
post annex sites 
have been 
installed with 
VPNs for a total 
of 330 VPNs in 
place. ENM is on 
target to achieve 
99.7% reliability 
and complete 
340 VPNs by 
September 30, 
2007. 


2008 


Strengthening 
Consular and 
Management 
Capabilities 


Customer 
Results 


Service 
Accessibility 


1 ntegration 


Percent of 

enterprise 

standardized 

under Central 

Enterprise 

Oversight. 


Baseline is 0% in 
FY2004. 


1 ncrease to 40% 
of domestic sites 
and foreign 
posts in FY2008. 


TBD 


2008 


Strengthening 
Consular and 
Management 
Capabilities 


Mission and 
Business Results 


Information and 

Technology 

Management 


IT Infrastructure 
Maintenance 


Cost per bit of 
bandwidth 
decreases due to 
network 
modernization. 


Baseline is 
$.45/bit in 
FY2004. 


Decrease cost 
per bit of 
bandwidth to 
$.29/bit in 
FY2008 - for a 
10% annual 
decrease. 


TBD 


2008 


Strengthening 
Consular and 
Management 
Capabilities 


Processes and 
Activities 


Security and 
Privacy 


Security 


Percent of 
enterprise 
covered by real- 
time patch 
management 
and security 
monitoring tools. 


Baseline is 0% in 
FY2004. 


1 ncrease to 70% 
of targeted 
devices in 
FY2008 


TBD 


2008 


Strengthening 
Consular and 
Management 


Technology 


Reliability and 
Availability 


Availability 


Percent of 

network 

availability. 


Baseline is 99% 
availability in 
FY2004 and 200 


Maintain 
network 
availability at 


TBD 
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Performance 1 nformation Table 


Fiscal Year 


Strategic 
Goal(s) 
Supported 


Measurement Measurement Measurement 


Measurement 
1 ndicator 


Baseline 


Target 


Actual Results 




Capabilities 








Number of sites 
installed with 
VPNs. 


VPNs installed. 


99.7% in 
FY2008. Install 
40 additional 
VPNs(for a total 
of 380 VPNs) to 
formerly 
convenience 
sites reclassified 
to enterprise 
sites such as 
post annexes 
and other sites 
with official 
consular staff. 





Section E: Security and Privacy (IT Capital Assets only) 



|8. Planning Si Operational Systems - Privacy Table: 



(a) Name of System 


(b) Is this a new 


(c) Is there at least 
one Privacy 1 mpact 
Assessment ( PI A) 
which covers this 
system? (Y/ N) 


(d) Internet Link or 
Explanation 


( e) 1 s a System of 
Records Notice (SORN) 
required for this 
system? (Y/ N) 


(f) 1 nternet Link or 
Explanation 


ClassNet GSS 


No 


No 


No, a PI A is not required 
because the system does 
not contain, process, or 
transmit personal 
identifying information. 


No 


No, because the system 
is not a Privacy Act 
system of records. 


OpenNet GSS 


No 


No 


No, a PIA is not required 
because the system does 
not contain, process, or 
transmit personal 
identifying information. 


No 


No, because the system 
is not a Privacy Act 
system of records. 


Details for Text Options: 

Column (d): If yes to (c), provide the link(s) to the publicly posted PIA(s) with which this system is associated. If no to (c), provide an explanation 
why the PI A has not been publicly posted or why the PI A has not been conducted. 

Column (f): If yes to (e), provide the link(s) to where the current and up to date SORN(s) is published in the federal register. If no to (e), provide 
an explanation why the SORN has not been published or why there isn't a current and up to date SORN. 

Note: Working links must be provided to specific documents not general privacy websites. Non-working links will be considered as a blank field. 



Section F: Enterprise Architecture (EA) (IT Capital Assets only) 

In order to successfully address this area of the capital asset plan and business case, the investment must be included in the 
agency's EA and Capital Planning and Investment Control (CPIC) process and mapped to and supporting the FEA. The business 
case must demonstrate the relationship between the investment and the business, performance, data, services, application, and 
technology layers of the agency's EA. 

1. Is this investment included in your agency's target Yes 
enterprise architecture? 

a. If "no," please explain why? 



2. Is this investment included in the agency's EA Transition Yes 
Strategy? 

a. If "yes," provide the investment name as identified in Global Network 
the Transition Strategy provided in the agency's most recent 

annual EA Assessment. 

b. If "no," please explain why? 



4. Service Component Reference Model (SRM) Table: 

Identify the service components funded by this major IT investment (e.g., knowledge management, content management, customer relationship management, 
etc.). Provide this information in the format of the following table. For detailed guidance regarding components, please refer to http://www.egov.gov. 


Agency 
Component 
Name 


Agency 
Component 
Description 


FEA SRM 

Service 
Domain 


FEA SRM 
Service Type 


FEA SRM 
Component (a) 


Service 
Component 
Reused Name 
(b) 


Service 
Component 
Reused UPI 
(b) 


1 nternal or 

External 
Reuse? (c) 


BY Funding 
Percentage (d) 
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4. Service Component Reference Model (SRM) Table: 

Identify the service components funded by this major IT investment (e.g., knowledge management, content management, customer relationship management, 
etc.). Provide this information in the format of the following table. For detailed guidance regarding components, please refer to http://www.egov.gov. 


Agency 
Component 


Agency 
Component 


FEA SRM 

Service 


FEA SRM 


FEA SRM 


Service 
Component 


Service 
Component 


1 nternal or 
External 


BY Funding 
















Configuration 
Management 


Control the 
hardware and 
software 

pnui rnn mpnfc: 

CI Ivll Ul II 1 Id ILj, 

as well as 
documents of an 
organization. 


Business 

Management 

Services 


Management of 
Processes 


Configuration 
Management 






No Reuse 


1 


Program/ Project 
Management 


Manage and 
control of a 
particular effort 
of an 

organization. 


Business 

Management 

Services 


Management of 
Processes 


Program / 

Project 

Management 






No Reuse 


2 


Network 
Management 


Monitor and 
maintain a 
communications 
network in order 
to diagnose 
problems, gather 
statistics, and 
provide general 
usage. 


Business 

Management 

Services 


Organizational 
Management 


Network 
Management 






No Reuse 


1 


Assistance 
Request 


Support the 
solicitation of 
support from a 
customer. 


Customer 
Services 


Customer 
1 nitiated 
Assistance 


Assistance 
Request 






No Reuse 


2 


Data Network 
Services 


Executes, 
maintains, and 
supports the 
devices, 
facilities, and 
standards that 
provide the 
computing and 
networking 
within and 
between 
enterprises. 


Support Services 


Communication 


NEW 






No Reuse 


56 


Access Control 


Support the 
management of 
permissions for 
logging onto a 
computer, 
application, 
service or 
network; 
includes user 
management 
and 

role/privilege 
management 


Support Services 


Security 
Management 


Access Control 






No Reuse 


4 


Cryptography 


Support the use 
and 

management of 

ciphers, 

including 

encryption and 

decryption 

processes, to 

ensure 

confidentiality 
and integrity of 
data. 


Support Services 


Security 
Management 


Cryptography 






No Reuse 


9 


Continuity of 
Operations 


The execution of 
contingency 
plans for 
operations 
during crisis, 
unforeseen 
circumstances, 
or disruptions in 
normal day-to- 

LI O y L/L/CICII.IUII3. 


Support Services 


Security 
Management 


NEW 






No Reuse 


3 


Issue Tracking 


Receive and 
track user- 
reported issues 
and problems in 
using IT 
systems, 
including help 
desk calls. 


Support Services 


Systems 
Management 


Issue Tracking 






No Reuse 


1 


License 


Support the 


Support Services 


Systems 


License 






No Reuse 


16 
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4. Service Component Reference Model (SRM) Table: 

dentify the service components funded by this major IT investment (e.g., knowledge management, content management, customer relationship management, 
etc.). Provide this information in the format of the following table. For detailed guidance regarding components, please refer to http://www.egov.gov. 



Agency 



Agency 



FEA SRM 



FEA SRM 



FEA SRM 



Service 
Component 



Service 
Component 



I nternal or 



BY Funding 



Management 


purchase, 
upgrade, and 
tracking of legal 
usage contracts 
for system 
software and 
applications. 




Management 


Management 










Remote Systems 
Control 


Support the 
monitoring, 
administration, 
and usage of 
applications and 
enterprise 
systems from 
locations outside 
of the immediate 
system 
environment. 


Support Services 


Systems 
Management 


Remote Systems 
Control 






No Reuse 


2 


Software 
Distribution 


Support the 
propagation, 
installation, and 
upgrade of 
written computer 
programs, 
applications, and 
components. 


Support Services 


Systems 
Management 


Software 
Distribution 






No Reuse 


2 


System 

Resource 

Monitoring 


Support the 
balance and 
allocation of 
memory, usage, 
disk space, and 
performance on 
computers and 
their 

applications. 


Support Services 


Systems 
Management 


System 

Resource 

Monitoring 






No Reuse 


1 



a. Use existing SRM Components or identify as "NEW". A "NEW" component is one not already identified as a service 
component in the FEA SRM. 

b. A reused component is one being funded by another investment, but being used by this investment. Rather than answer 
yes or no, identify the reused service component funded by the other investment and identify the other investment using the 
Unique Project Identifier (UPI ) code from the OMB Ex 300 or Ex 53 submission. 

c. 'Internal' reuse is within an agency. For example, one agency within a department is reusing a service component 
provided by another agency within the same department. 'External' reuse is one agency within a department reusing a service 
component provided by another agency in another department. A good example of this is an E-Gov initiative service being 
reused by multiple organizations across the federal government. 

d. Please provide the percentage of the BY requested funding amount used for each service component listed in the table. If 
external, provide the percentage of the BY requested funding amount transferred to another agency to pay for the service. The 
percentages in the column can, but are not required to, add up to 100%. 



5. Technical Reference Model (TRM) Table: 

To demonstrate how this major IT investment aligns with the FEA Technical Reference Model (TRM), please list the Service Areas, Categories, Standards, and 
Service Specifications supporting this IT investment. 


FEA SRM Component (a) 


FEA TRM Service Area 


FEA TRM Service Category 


FEA TRM Service Standard 


Service Specification (b) 
(i.e., vendor and product 








Issue Tracking 


Component Framework 


Data Management 


Reporting and Analysis 


Remedy Action Request 
System 


Access Control 


Component Framework 


Security 


Certificates / Digital Signatures 


Digital Certificate 
Authentication - Patriot 
Technologies RSA Secure 


Access Control 


Component Framework 


Security 


Certificates / Digital Signatures 


Secure Sockets Layer (SSL) - 
Microsoft supported 


System Resource Monitoring 


Service Access and Delivery 


Access Channels 


Other Electronic Channels 


NetlQ Application Manager 


Assistance Request 


Service Access and Delivery 


Access Channels 


Other Electronic Channels 


Remedy Action Request 
System 


Network Management 


Service Access and Delivery 


Delivery Channels 


1 ntranet 


Hewlett-Packard OpenView 


Access Control 


Service Access and Delivery 


Service Requirements 


Authentication / Single Sign-on 


Cisco Access Control System 


Access Control 


Service Access and Delivery 


Service Requirements 


Hosting 


Microsoft Active Directory 


Program / Project Management 


Service Access and Delivery 


Service Requirements 


Legislative / Compliance 


Business Engine Microframe 
Program Manager (MPM) 


Program / Project Management 


Service Access and Delivery 


Service Requirements 


Legislative / Compliance 


Section 508 (all systems must 
comply) 


Software Distribution 


Service Access and Delivery 


Service Transport 


Service Transport 


File Transfer Protocol (FTP) - 
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5. Technical Reference Model (TRM) Table: 

To demonstrate how this major IT investment aligns with the FEA Technical Reference Model (TRM), please list the Service Areas, Categories, Standards, and 
Service Specifications supporting this IT investment. 


FEA SRM Component (a) 


FEA TRM Service Area 


FEA TRM Service Category 


FEA TRM Service Standard 


Service Specification (b) 
(i.e., vendor and product 
















Microsoft supported 


License Management 


Service Access and Delivery 


Service Transport 


Service Transport 


Hyper Text Transfer Protocol 
(HTTP) - Microsoft supported 


Network Management 


Service Access and Delivery 


Service Transport 


Service Transport 


Internet Protocol (IP) v4 
transitioning to v6 - Cisco, 
Microsoft Supported 


Network Management 


Service Access and Delivery 


Service Transport 


Service Transport 


1 P Security (1 PSEC) - Cisco, 
Nortel supported 


Network Management 


Service Access and Delivery 


Service Transport 


Service Transport 


Taave Software Co. PReView 


Network Management 


Service Access and Delivery 


Service Transport 


Service Transport 


Transport Control Protocol 
(TCP) - Cisco, Microsoft 
supported 


NEW 


Service Access and Delivery 


Service Transport 


Supporting Network Services 


Continuity of Operations 


NEW 


Service Access and Delivery 


Service Transport 


Supporting Network Services 


Continuity of Operations; 
Switches: Cisco Catalyst 6500 
24-port GigE Mod: Fabric- 
enabled 


NEW 


Service Access and Delivery 


Service Transport 


Supporting Network Services 


Data Network Services 


NEW 


Service Access and Delivery 


Service Transport 


Supporting Network Services 


Data Network Services; 

Rnnfprc- i~icrn 

w/AC+POE, 2 GE, 4HWIC, 
3PVDM, 1NME-X, 2AI M, IP 
Base, 64F/256D 


NEW 


JSC I VILC HLLCbb dllU UCIIVCiy 


Service Transport 


Qi nnnrtinn MohjwfirL' ^ on/iroc 
3UppUI Lilly IMCLVVUIK. JCI VILCb 


UdLd IMCLWUI rV JCl VILCi, 

Routers: Cisco 7206VXR with 
NPE-G1 includes 3 GigE/FE/E 
ports and IP SW 


NEW 


Camira Arrocc ^nH [""laliwcarw 
ALLfcJbb dMU UfcMIVfcJFy 


Service Transport 


Supporting Network Services 


UdLd IMcLWUrK jci VILcb, 

Switches: Cisco Catalyst 3560, 
24-port 10/100 + 2SFP 
Enhanced 


NEW 


Service Access and Delivery 


Service Transport 


Supporting Network Services 


Data Network Services; 
Switches: Cisco Catalyst 3750, 
24 port 10/100 + 2SFP 
Enhanced 


NEW 


Service Access and Delivery 


Service Transport 


Supporting Network Services 


Data Network Services; Type 2 
Encryption: Nortel Contivity 
switch 600 128bit dual LAN 
Ethernet 


Remote Systems Control 


Service Platform and 
1 nfrastructure 


Database / Storage 


Database 


Microsoft SQL Server 


License Management 


Service Platform and 
1 nfrastructure 


Database / Storage 


Database 


Oracle Enterprise Edition 9i 


Software Distribution 


Service Platform and 
1 nfrastructure 


Delivery Servers 


Web Servers 


Microsoft Internet Information 
Server 


Network Management 


Service Platform and 
1 nfrastructure 


Hardware / Infrastructure 


Local Area Network (LAN) 


Ethernet - Cisco supported 


Network Management 


Service Platform and 
1 nfrastructure 


Hardware / Infrastructure 


Network Devices / Standards 


Cisco Routers, including 
2621xm, 7208vxr 


Network Management 


Service Platform and 
1 nfrastructure 


Hardware / Infrastructure 


Network Devices / Standards 


Cisco Switches, including 
2950, 3750, 6509 


Network Management 


Service Platform and 
1 nfrastructure 


Hardware / Infrastructure 


Network Devices / Standards 


Lucent Optical Switching, OC3, 
OC12, OC48 


Cryptography 


Service Platform and 
1 nfrastructure 


Hardware / Infrastructure 


Network Devices / Standards 


Nortel 600, 1700, 2700; 
General Dynamics Taclane, 
Sectera 


Remote Systems Control 


Service Platform and 
1 nfrastructure 


Hardware / Infrastructure 


Servers / Computers 


Hewlett-Packard Enterprise 
Server, including DL380 


Network Management 


Service Platform and 
1 nfrastructure 


Hardware / 1 nfrastructure 


Wide Area Network (WAN) 


Marconi Asynchronous Transfer 
Mode (ATM) - ServiceOnData 


Network Management 


Service Platform and 
1 nfrastructure 


Hardware / Infrastructure 


Wide Area Network (WAN) 


Niksun NetVCR 


Remote Systems Control 


Service Platform and 
1 nfrastructure 


Software Engineering 


Software Configuration 
Management 


Microsoft SMS Deployment 
Management 


Configuration Management 


Service Platform and 
1 nfrastructure 


Software Engineering 


Software Configuration 
Management 


Opsware Network Automation 
System 



a. Service Components identified in the previous question should be entered in this column. Please enter multiple rows for 
FEA SRM Components supported by multiple TRM Service Specifications 

b. In the Service Specification field, agencies should provide information on the specified technical standard or vendor 
product mapped to the FEA TRM Service Standard, including model or version numbers, as appropriate. 

6. Will the application leverage existing components and/or Yes 
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Exhibit 300: Exhibit 300 - Global Network (Revision 6) 

applications across the Government (i.e., FirstGov, Pay.Gov, 
etc)? 




Section B: Risk Management (All Capital Assets) 

You should have performed a risk assessment during the early planning and initial concept phase of this investment's life-cycle, 
developed a risk-adjusted life- cycle cost estimate and a plan to eliminate, mitigate or manage risk, and be actively managing 
risk throughout the investment's life-cycle. 

1. Does the investment have a Risk Management Plan? Yes 

a. If "yes," what is the date of the plan? 7/13/2007 

b. Has the Risk Management Plan been significantly No 
changed since last year's submission to OMB? 

c. If "yes," describe any significant changes: 

N/A 

2. If there currently is no plan, will a plan be developed? 

a. If "yes," what is the planned completion date? 

b. If "no," what is the strategy for managing the risks? 



3. Briefly describe how investment risks are reflected in the life cycle cost estimate and investment schedule: 

As part of the project management process, all Global Network projects identify and analyze risks during project planning. Risk 
analysis includes classifying the risks and assessing the risk probability, impact, immediacy, and controllability. These attributes 
help the Global Network program manager identify the greatest risks to the program and ensure they are appropriately 
mitigated. 

To facilitate risk analysis, all Global Network project managers (PMs) attended a risk assessment workshop. Using a risk 
assessment tool developed in concert with the Software Engineering Institute (SEI), the PMs answered a series of questions to 
more objectively quantify risk probability and impact, particularly related the project cost and schedule performance. 

All projects within the Global Network follow the Managing State Projects (MSP) lifecycle and report on their risks at each control 
gate, in addition to semiannual project status reviews. Cost and schedule performance is tracked within the Earned Value 
Management System (EVMS), which has helped PMs understand how realized risks have affected the project - leading to better 
future estimates. 
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